METHODS AND SYSTEMS FOR USING PHYSICAL PAYMENT CARDS IN SECURE E-COMMERCE TRANSACTIONS

• US 20100088237A1
• Filed: 10/05/2009
• Published: 04/08/2010
• Est. Priority Date: 10/04/2008
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Wankmueller, John R.
• Granted Patent: US 8,965,811 B2
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

Pursuant to some embodiments, methods, systems, apparatus, computer program code and means for conducting an online transaction by a user operating a computer are provided which include identifying, at the computer, that the user has selected a secure payment option during a transaction with a merchant. The computer is caused to enter a private session. During the private session, payment card data from a physical payment card held by the user is received, and the payment card data is forwarded to a payment provider to cause the payment provider to provide substitute payment card details to the merchant to complete the transaction.

Claims

1. A method for conducting an online transaction by a user operating a computer, comprising:

identifying, at said computer, that said user has selected a secure payment option during a transaction with a merchant;

causing, based on said identifying, said computer to enter a private session;

during said private session, receiving payment card data from a physical payment card held by said user; and

during said private session, forwarding said payment card data to a payment provider to cause said payment provider to provide substitute payment card details to said merchant to complete said transaction.

2. The method of claim 1, wherein said private session prevents said computer from storing said payment card data from said physical payment card.

3. The method of claim 1, wherein said causing said computer to enter a private session further causes a secure channel to be established between said computer and said payment provider.

4. The method of claim 3, wherein said secure channel is a secure session comprising at least one of a public key session and a private key session.

5. The method of claim 1, wherein said completion of said transaction by said payment provider further comprises:

identifying a remote wallet associated with said payment card data;

selecting a virtual payment account number; and

transmitting a payment authorization request to said merchant, said payment authorization request including said virtual payment account number and dynamic data associated with said remote wallet.

6. The method of claim 5, wherein said dynamic data associated with said wallet causes said transaction to be a card present transaction.

7. The method of claim 1, wherein said payment card data is received from a payment card reader connected to said computer.

8. The method of claim 1, wherein said physical payment card is at least one of a magnetic stripe payment card, a contactless payment card, and a contact payment card or dual interface, contact and contactless payment card.

9. A method for conducting an online transaction by a user operating a computer, comprising:

receiving, from a user operating a computer, payment card data read from a physical payment card, the payment card data including a PAN and card specific data;

identifying a VPAN associated with said PAN;

creating a purchase request containing said VPAN instead of said PAN, and transmitting said purchase request to a merchant associated with said online transaction;

receiving an authorization request containing said VPAN and transaction data;

creating an updated authorization request containing said PAN and said transaction data;

receiving an authorization response from an issuer of said physical payment card; and

providing an updated authorization response to said merchant to complete said transaction.

10. The method of claim 9, wherein said updated authorization response includes said VPAN.

11. The method of claim 9, wherein said receiving said payment card data is performed over a secure channel with said computer.

12. The method of claim 9, wherein said identifying a VPAN associated with said PAN further comprises:

identifying an electronic wallet associated with said user; and

authenticating the user.

13. The method of claim 12, wherein said authenticating the user comprises receiving a password from said user and verifying that said password is associated with said electronic wallet.

14. A payment provider apparatus, comprising:

a processor coupled to the communication device; and

a storage device in communication with said processor and storing instructions adapted to be executed by said processor to process information received from a remote user device to;

identify payment data associated with a physical payment device, said payment data including a primary account number (“

PAN”

) and an expiry date of a payment account associate with said PAN;

identify an electronic wallet associated with a remote user operating said remote user device;

transmit a purchase request message to said merchant, said purchase request message including a virtual PAN rather than said PAN;

receive an authorization request message from said merchant, said authorization request message including said VPAN and transaction details;

create an updated authorization request message including said PAN and said transaction details;

transmit said updated authorization request message to an issuer associated with said PAN;

receive an authorization response message from said issuer; and

transmit an updated authorization response message to said merchant to complete said transaction, said updated authorization response message including said VPAN.

15. The apparatus of claim 14, further comprising instructions adapted to be executed by said processor to identify a merchant posting address associated with a transaction between said remote user and said merchant wherein said purchase request message is transmitted to said merchant using said merchant posting address.

16. The apparatus of claim 14, wherein said instructions to identify an electronic wallet further include instructions to verify an identity of said remote user.

17. The apparatus of claim 14, further comprising instructions adapted to be executed by said processor to establish a secure communications session with said remote user device, said secure communications session used to receive said information from said remote user device.

18. The apparatus of claim 14, wherein said VPAN includes a bank identification number identifying an entity associated with said server as the issuer of said VPAN.

19. The apparatus of claim 14, wherein said storage device further stores at least one of an electronic wallet database and a transaction database.

20. The apparatus of claim 14, further comprising:

a communication device coupled to said processor and adapted to communicate with at least one of;

(i) said remote user device, (ii) a merchant device, and (iii) an issuer device.